Created attachment 473527 [details] [diff] [review]
The variable is nsIContent*, but scripts may run before it is used.
I don't have a testcase, but based on code this might lead to crash when
using image maps and deleting the image element when it gets focus.
Or something like that.
Comment on attachment 473527 [details] [diff] [review]
Approved for 188.8.131.52 and 184.108.40.206, a=dveditz